The X-Spam-Virus could be absent from the email header.
You can consider adding the following line:
add_header spam Virus _VIRUSRESULT_
If this doesn't work, the ClamAV plugin might need to include
"put_metadata('X-Spam-Virus')" when it detects a virus.
Jimmy
On Fr
uri __ADB_CPN_LINK /\.campaign\.adobe\.com\/r\/\?/
rawbody __IMG_SRC_CID / wrote:
> Hi
> I have a SpamAssassin version 3.4.6
>
> And I try resolv two problem
>
> 1)I put eml with spam and learn SA like:
> sa-learn --spam /root/spamik/
>
> In /root/spamik/ is 4 e-mail
> Worsk great but after
>
> W dniu 12.12.2023 o 12:21, Jimmy pisze:
>
>
> uri __ADB_CPN_LINK /\.campaign\.adobe\.com\/r\/\?/
> rawbody __IMG_SRC_CID /
> meta ADB_CPN_ABUSE __ADB_CPN_LINK && __IMG_SRC_CID
> describe ADB_CPN_ABUSE Possible malware link
> score ADB_CPN_ABUSE 2.5000
eated the regex pattern using the following code:
Regexp::Assemble->new->add(@words)->reduce(0)->as_string
Afterward, I converted it to UTF-8 hex.
I'm wondering if there are any tools available to facilitate the creation
of these regex patterns.
Thank you,
Jimmy
The pattern has successfully passed the test script, but it needs to check
whether Bayes learning will identify and possibly exclude the word from
matching this pattern.
Thank you.
On Thu, Dec 28, 2023 at 9:22 PM wrote:
> On 12/28/23 12:59, Jimmy wrote:
> > Hi,
> >
> > I
Yes, I have done that, and I am also editing Plugin/Bayes.pm to investigate
why it is not being skipped. I suspect that if words are not separated by
spaces, longer words may not match those patterns.
Jimmy
On Thu, Dec 28, 2023 at 10:13 PM wrote:
> "spamassassin -D bayes" will
bayes_stopword_th https://pastebin.pl/view/0838138d
Sample mail https://pastebin.pl/view/e5a2c5b8
Jimmy
On Thu, Dec 28, 2023 at 10:59 PM wrote:
> Could you share a config line and a sample you are using ?
> Giovanni
>
> On 12/28/23 16:26, Jimmy wrote:
> > Yes, I have d
าท" that was listed in regexp pattern but somehow I don't
know why it not show skipped token in bayes.
Jimmy
On Fri, Dec 29, 2023 at 2:59 PM wrote:
> Config line produces a syntax error for me:
> config: failed to parse line in /etc/mail/spamassassin/local.cf (line 1):
> bayes_s
You can use this word list
https://raw.githubusercontent.com/stopwords-iso/stopwords-th/master/stopwords-th.txt
Jimmy
On Fri, Dec 29, 2023 at 3:59 PM wrote:
> To create the stopwords regexp I used the script I shared in a previous
> email and a list of words one per line.
> Could
The sample email and word list should contain at least these words.
ถูก
เลย
ทุก
Jimmy
On Fri, Dec 29, 2023 at 4:47 PM wrote:
> I do not speak Thai but I cannot see any word in the sample email that
> should match that list.
> Which word do you think should match the regexp ?
>
This is what I believe: the words need to be trimmed or separated, and
careful consideration is required to determine the language in order to
perform accurate cutoffs.
Jimmy
On Fri, Dec 29, 2023 at 5:16 PM wrote:
> "ทุก" is not considered a word because it's
You can create rule something like this
header BLOCK_EMAIL From:addr =~ /user\@domain\.com/
describe BLOCK_EMAIL Block email
scoreBLOCK_EMAIL5.00
On Sat, Dec 30, 2023 at 10:08 AM FalconChristopher <
falconchristop...@bell.net> wrote:
> Anyone know
Despite my efforts, the rule doesn't seem to correctly identify the
specified text. I'm uncertain whether there is an error in the rule, or if
I've overlooked something crucial.
Thank you
Jimmy
Hello Laurent,
I wanted to express my gratitude for sharing the tip on rawbody matching.
Your assistance is greatly appreciated.
Thank you,
Jimmy
On Tue, Jan 16, 2024 at 4:01 PM Laurent S. <
110ef9e3086d8405c2929e34be5b4...@protonmail.ch> wrote:
> Hi Jimmy,
>
> If you want to
ation by the SpamCop blacklist since November 2023, with a notable
spike in activity during February and March 2024.
Jimmy
On Tue, Mar 19, 2024 at 12:10 AM Jared Hall via users <
users@spamassassin.apache.org> wrote:
> I've several customers whose accounts were used to send
ETURNPATH_IS" rule should indeed be
triggered since it matches "yahoo.com" in the return-path. If you're
uncertain about the intended behavior of the rules, please clarify the
requirements so we can adjust the rules accordingly.
Jimmy
On Wed, Mar 20, 2024 at 4:52 AM Erickarlo Porr
According to RFC 2298, the envelope sender address (SMTP MAIL FROM) of the
Message Disposition Notification (MDN) must be null (<>). This
specification indicates that no Delivery Status Notification (DSN) messages
or other notifications about successful or unsuccessful delivery should be
sent in re
OMAIN To:addr =~ /\@(?[^\s@]+)/
How to fix this rule or any easyway to capture value of To: domain
I noticed a test file where %{HEADER(From:addr:domain)} is used to extract
the domain. I'm unsure if %{HEADER(To:addr:domain)} is supported, as
testing it did not resolve the issue.
Jimmy
multiple groups within the same
rules like this?
header __TZ_CAP_TO_ADDR To:addr =~
/(?)\@(?)/
Jimmy
On Thu, May 23, 2024 at 2:40 PM Carsten wrote:
> Hi @all,
>
> I want to create a SpamAssassin rule that checks if the subject line of an
> email contains t
er I am am not realy sure about these error
messages. Any assistance would be greatly appreciated.
Regards,
Jimmy.
t negative matched: %s /%s/", $op,$patt);
+ } else {
+next unless defined $match;
+dbg("uri: text matched: '%s' %s /%s/", $match,$op,$patt);
+ }
+}
+
if (exists $rule->{domain}) {
my($op,$patt,$neg) = @{$rule->{domain}};
my
x{97}\x{E0}\x{B8}\x{B5}
not matches the
pattern:(?^aa:x\\{E0\\}x\\{B8\\}x\\{97\\}x\\{E0\\}x\\{B8\\}x\\{B1\\}x\\{E0\\}x\\{B8\\}x\\{99\\}x\\{E0\\}x\\{B8\\}x\\{97\\}x\\{E0\\}x\\{B8\\}x\\{B5\\})
with operator:=~
On Sun, Feb 2, 2025 at 1:57
again for your help!
On Mon, Feb 3, 2025 at 6:15 AM John Hardin wrote:
> On Sun, 2 Feb 2025, Jimmy wrote:
>
> > dbg: uri: Not match:
> >
> text:\x{E0}\x{B8}\x{95}\x{E0}\x{B9}\x{88}\x{E0}\x{B8}\x{AD}\x{E0}\x{B8}\x{AD}\x{E0}\x{B8}\x{B2}\x{E0}\x{B8}\x{A2}\x{E0}\x{B8}\x{B8}\x{E0}
}
Could you please review this issue and advise on any potential fixes or
workarounds?
For additional context, you can view the full details of email here:
https://pastebin.com/pAKDdY55
Thank you for your assistance.
Jimmy
-mail
so that it will learn the spam messages. My question is how can I verify
that spamassasin is actually learning from the emails=20 that are
forwarded to the bad-mail mailbox?
Also how can I increase my spam block rate?
In addition I also run the rules_du_jour everynight.
thanks
jimmy
Cool thanks, I was getting kind of confused.
So I guess my next task will be to add razor.
thanks
-Original Message-
From: Matt Kettler [mailto:[EMAIL PROTECTED]
Sent: Thursday, December 02, 2004 7:04 AM
To: Nicolas; spamassassin-users mailing-list
Subject: Re: Is it not recommanded to
I thought the format was blacklist_from
-Original Message-
From: Brian O'Neill [mailto:[EMAIL PROTECTED]
Sent: Thursday, December 02, 2004 2:10 PM
To: users@spamassassin.apache.org
Subject: Blacklist one address
Hello,
I read that adding black_list [EMAIL PROTECTED] to my local.cf
file
Hello all,
I have SpamAssassin version 2.63 with pyzor installed. When I type
spamassassin -D
. Any advice would be greatly appreciated.
Regards,
Jimmy
Hello,
How do you clear the AWL and Bayes Lists is that just a case of deleting
the files or is there some special command to do that ?
Regards,
Jimmy
JamesDR wrote:
Jimmy Stewpot wrote:
Hello,
I am currently trying to configure spam assassin with some custom
rules to block certain
only) but I still
don't seem to have any success.
I also added the following lines to the configuration and it made no difference.
add_header all DCC _DCCB_: _DCCR_
I still don't see any header information reporting DCC..
Any advice would be really appreciated.
Regards,
Jimmy.
Hello,
I currently use the SARE rules database for my incoming spam detection
and prevention. Over recent months I have begun to see a big increase in
the number of spams. I am interested to know if there are any
alternatives to SARE for an external list of rules?
Regards,
Jimmy
messages that have been marked in this way. Am I missing the point of
RDNS_NONE as a rule? What is it meant to actually be doing?
Regards,
Jimmy
one an sa-learn for both ham and
spam emails on folders which I have moved all the spam messages to.
Any advice on resolving or how to diagnose these problems would be
greatly appreciated.
Regards,
Jimmy.
--[ UxBoD ]-- wrote:
First thing first. Could you run a spamassassin -D --lint as the user which is
scanning the email, and post the results please. This will allow people to
diagnose the problem more easily.
Regards,
UxBoD
On Wed, 28 Mar 2007 09:12:20 +0100, Jimmy Stewpot <[EM
the bayes.
- Original Message ----- From: "Jimmy Stewpot" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Cc:
Sent: Wednesday, March 28, 2007 1:37 AM
Subject: Re: spamassassin not checking emails correctly.
--[ UxBoD ]-- wrote:
First thing first. Could you run a spamassassin -D --lin
36 matches
Mail list logo
